Privacy Policy

Tori (torionline.com) provides an AI-powered WhatsApp booking assistant for small businesses — hair salons, clinics, studios, and similar service providers ("Businesses"). This Privacy Policy explains what data we collect, why, and how it's handled — covering both the Business owners who use our dashboard and the end customers who book appointments through the WhatsApp bot.

By using Tori's dashboard, WhatsApp bot, or public booking page, you agree to the practices described here. If you're an end customer messaging a business's Tori-powered WhatsApp number, your data is processed on behalf of that business, as described below.

Business account data — name, email address, password (hashed, never stored in plain text), business name, address, timezone, and configured settings (services, staff, hours, bot personality).

End-customer data (via the WhatsApp bot) — when someone messages a business's Tori number, we store their phone number, name (if given), the appointments they book, and the full conversation transcript with the bot, so the business can review it and the bot can maintain context across messages.

Payment data — subscription billing is handled entirely by PayPlus. We store a recurring charge token reference; we never see or store full card numbers.

Google Calendar data — if a business connects Google Calendar, we request the calendar.events scope to read availability and create booking events.

Technical data — standard server logs (timestamps, error traces, IP address) for debugging and abuse prevention.

• Operating the WhatsApp bot: understanding messages, checking availability, booking/cancelling/rescheduling appointments.
• Syncing confirmed bookings to a business's connected Google Calendar.
• Sending appointment reminders, review requests, and — if enabled — a daily schedule digest to the business owner.
• Processing subscription payments and billing notifications via PayPlus.
• Improving reliability and diagnosing bugs from anonymized server logs.

Tori's bot is powered by Anthropic's Claude API. When a customer messages the WhatsApp bot, their message text and relevant business context (services, hours, prior conversation history) are sent to Anthropic to generate a response. Anthropic processes this data under its own API terms and does not use API data to train its models by default.

We do not use customer conversation data to train any AI model ourselves.

We do not sell, rent, or trade personal data. We share data only with the infrastructure providers needed to run the service, each bound by their own data protection terms:

• Meta (WhatsApp Business Platform) — transmits and receives WhatsApp messages.
• Anthropic — processes conversation text to power the AI assistant.
• Google — Calendar API, only for businesses that opt in to calendar sync.
• PayPlus — subscription billing and payment processing.
• Resend — transactional emails (password resets, account notifications).
• Railway — application hosting and database infrastructure.

We may disclose data if required by law or to protect the rights, safety, or property of Tori, our users, or the public.

Tori's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Google Calendar data is used only to check availability and create booking events — the core scheduling feature visible in our interface.
• We do not transfer this data to third parties, except as necessary to provide the feature itself (e.g. our hosting infrastructure) or as required by law.
• We do not use Google Calendar data for advertising, ad targeting, or building user profiles.
• No human at Tori reads calendar data except with explicit user permission for troubleshooting, or as required for security investigations or legal compliance.

Business account data is retained for as long as the account is active. If a business disconnects Google Calendar or deletes their account, associated OAuth tokens and calendar sync records are purged immediately.

Conversation history between the bot and end customers is retained to preserve context and give business owners a record of past interactions; only the most recent messages are actively used by the bot, and older messages are pruned automatically.

Cancelled appointments and expired trial data may be retained for a limited period for accounting and dispute-resolution purposes, then deleted.

Passwords are hashed and never stored in plain text. WhatsApp access tokens, Google OAuth tokens, and other credentials are encrypted at rest. All traffic to our dashboard and API is served over HTTPS. Webhook requests from Meta are verified using HMAC signatures to prevent spoofing.

Tori does not use tracking cookies or third-party advertising/analytics scripts. Our dashboard stores a session token in your browser's local storage to keep you signed in — this token never leaves your device except to authenticate requests to our own API, and is cleared when you log out.

Business owners can access, correct, or export their data from the dashboard at any time, and can request full account deletion by contacting us below.

End customers who booked an appointment through a business's WhatsApp bot can request that we delete their conversation history and stored personal data by contacting us or the relevant business directly. We will action deletion requests within a reasonable time, subject to any legal obligation to retain specific records.

Tori is intended for business use and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Tori operates from Israel and uses infrastructure providers that may process data in other countries (including the United States). By using our services, you consent to your data being transferred and processed outside your country of residence where applicable, with appropriate safeguards in place.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of Tori after changes take effect constitutes acceptance of the revised policy.

Questions about this policy or your data? Reach out at [email protected].